title: Secure S3 keys management summary: Improving security regarding s3 keys management date: 2023-03-10 jira: HDDS-8132 status: implementing author: Maksim Myskov, Mikhail Pochatkin

Abstract

There are problems related to the current S3 keys management:

Storing keys as plain text in Ozone Manager rocksdb is insecure. An ozone administrator can easily impersonate any user by recovering his keys from rocksdb.
The only way for a user to generate keys is to have SSH access to the Ozone cluster. Security policies can also prohibit this.
Keys revocation process is manual which leads to security issues.

We intend to extend Ozone S3 secret key management:

This document proposes solutions to the above issues.